WorksheetsMicrosoft Azure Fundamentals (AZ-900) - Practice Exam - 3
Total questions: 40
Worksheet time: 59mins
You maintain a single virtual machine (VM) as an internal server. This server has two CPUs and 8 GB RAM. You decide to increase the capacity of the same server to four CPUs and 16 GB RAM. Which cloud attribute is this an example of?
Autoscaling
Load balancing
Vertical scaling
Horizontal scaling
You maintain a pool of identical virtual machines that serves an application behind a load balancer. When customer demand increases, you need to add additional copies of the virtual machine to the pool to meet customer demand. What cloud attribute does this demonstrate?
Vertical scaling
Governance
Security
Horizontal scaling
What is the preferred method to synchronize user identities on an on-premises Active Directory server with Azure AD?
Use Azure Identity Protection in your on-premises environment to synchronize on-premises and Azure AD accounts.
Use Azure AD Connect in your Azure environment to synchronize on-premises and Azure AD accounts.
Use Azure AD Connect in your on-premises environment to synchronize on-premises and Azure AD accounts.
It is not possible to synchronize an on-premises Active Directory server with Azure AD. For security reasons, they must be maintained separately.
You are the Azure Administrator for Radio Gaga, LTD. You have a resource group named RG-RG and need to ensure no other administrators can create virtual networks in this resource group. What can you implement to accomplish this?
Azure policy
Properties
Access Control (IAM)
Locks
Define "economy of scale".
Spending money on products or services now and being billed for them now. You can deduct this expense from your tax bill in the same year.
Spending money on physical infrastructure up front, and then deducting that expense from your tax bill over time.
Prices for individual resources and services are provided so you can predict how much you will spend in a given billing period based on your expected usage.
The ability to do things more efficiently or at a lower cost per unit when operating at a larger scale.
Which Azure service can help you collect, analyze, and act on telemetry from your cloud and on-premises environments?
Azure Monitor
Azure WebJobs
Azure Analyzer
Azure App Service
Which of the following are benefits of Azure geographies?
(Choose3)
Any Azure geography can be used by anyone
Azure has geographies throughout the world
They are fault tolerant and can often withstand complete region failure
Data residency is honored within the geographical boundary
What are the advantages of the Zero Trust security model?
(Choose 2)
Allows access from any location once identity has been verified.
Restricts access to sensitive resources to users in trusted locations.
Allows extending the Azure management control plane to non-Azure resources.
Limits rogue actors from accessing sensitive resources.
Limits rogue actors from accessing sensitive resources.
What types of data does Azure Monitor collect?
(Choose2)
Physical hardware data
Metrics and logs
Only logs
Only metrics
Subscription monitoring data
What are the three components necessary for any role-based access control (RBAC) assignment?
(Choose3)
Conditional Access policy
Scope
Security principal
Role definition
What are Azure Resource Manager (ARM) templates?
Azure's management construct that manages and controls access to all interaction with Azure
A declarative method to orchestrate the deployment of resource templates and other artifacts such as role assignments, policy assignments, resource templates, and resource groups
Azure's native Infrastructure-as-Code (IaC) solution
A component of Azure AD to allow authentication based on conditions (i.e., if-then statements) that must be met to either allow or deny access
You are the Systems Administrator for a local university. You are deploying several sets of systems that will be used for research and development teams. Each set of systems will be uniform in nature, containing the same number and type of Azure resources. What should you recommend to automate the creation of these Azure resources?
Azure Resource Manager templates
Virtual machine scale sets
Multiple Azure Subscriptions
Management groups
What are region pairs?
Two or more regions in an Availability Set
A method to route traffic between two Availability Zones
Two geographies working together to host an application
A region that is linked with another region in the same geography
You need a service to define and enforce compliance standards in multiple Azure subscriptions. What service or feature should you use?
Azure Sentinel
Azure Policy
Conditional Access policy
ARM templates
You are the system administrator for T-Bones Restaurant Group, Inc. You currently have an on-premises data center that consists of 50 Windows servers running IIS and SQL Server. IT management has dictated that all systems should be moved to Azure in the coming year. They also state that only platform-as-a-service (PaaS) solutions should be implemented. Which of the following meet these requirements?
(Choose2)
Azure Virtual Network
Azure App Service
Azure SQL Database
Azure Virtual Machines
You need to implement multi-factor authentication (MFA) for Microsoft Cloud apps across your entire organization. The requirement for MFA needs to be centrally rolled out and enforced. What Azure functionality should you use to accomplish this task?
Azure Information Protection
Use a Conditional Access policy to roll out MFA to the entire organization
Network Security Groups (NSG)
Azure AD Connect
Your organization is planning to migrate your entire datacenter to Azure. You are required to recommend an architected solution that will allow operations to continue if an entire Azure region becomes unavailable. Which cloud attribute should you factor into your solution?
Reliability
Predictability
Scalability
Security
What methods are available to connect to the Azure Public Cloud?
(Choose3)
Physically at the Azure datacentre
Over the internet
Client or Site to Site VPN
Express Route
What is the purpose of Azure Blueprints?
Automated and repeatable resource deployment in Azure.
Synchronize on-premises AD with Azure AD.
Collect security data from across all your Azure and non-Azure resources, providing a single pane of glass for security monitoring and management.
Automated and repeatable environment setup in Azure.
You need to create an Azure storage solution that will store messages created by an Azure web role. The messages will then be processed by an Azure worker role. What type of storage solution should you create?
A Blob service in a storage account
A File service in a storage account
A virtual machine data disk
A Queue service in a storage account
From a pricing perspective, select the two statements that are true regarding infrastructure as a service virtual machines (VMs) and serverless resources, such as Azure Functions.
(Choose2)
Virtual machines are billed only when actively in use, such as when remoting into the machine.
Serverless resources, such as Azure Functions, are only billed when a function is executed (or run) and no longer billed once the function is no longer active.
Serverless resources, such as Azure Functions, are only billed for the entire time the function is created and ready to use.
Virtual machines are billed for the time they are running, whether or not they are in use.
After enforcing multi-factor authentication via a Conditional Access policy, users are complaining about the extra steps required to log in to their Microsoft 365 accounts. What steps can you take to lessen the inconvenience of this additional authentication step while still maintaining a strong security posture?
Remove multi-factor enforcement, which will remove the additional security layer.
Implement passwordless authentication. Users will not enter a password at the system login prompt. Instead, they will authenticate using the Microsoft Authenticator app on their smartphones and answer a challenge after verifying ID with a PIN or biometric authorization.
Implement passwordless authentication. Users will not enter a password at the system login prompt. Instead, they will authenticate with the Google Authenticator app on their smartphones and answer a challenge after verifying ID with a PIN or biometric authorization.
In the affected Conditional Access policy, create an exception only for Microsoft 365 applications to not enforce MFA, but require MFA everywhere else.
You are migrating an on-premises application to the Azure Cloud. The application communicates with a file share hosted on a Windows server that no other applications have access to. Which Azure storage services could be used to migrate the file share to?
(Choose 2)
Azure Files
Azure Disk Storage
Azure Virtual Machine
Azure Data Lake
Which of the following statements are true about horizontal scaling?
(Choose 3)
Horizontal scaling does not require downtime.
Horizontal scaling can occur automatically with no manual interaction.
Horizontal scaling requires downtime to increase compute capacity.
Horizontal scaling adds additional copies of a resource, like a VM or container, to a resource pool.
Which of the following components are required to establish communication between on-premises resources and resources in Azure?
(Choose2)
VPN Gateway
Azure Virtual Network
Route tables
VNet peer
While you are at a customer site, you have been asked to quickly create a new development virtual machine for your developers to experiment with new code features. The only computing device you have available is an Apple iPad tablet running iOS. Which methods can you use to create the virtual machine?
Install PowerShell on the tablet, and install the Azure module in PowerShell to create the resources.
Use the Azure portal.
Install Bash on the tablet, and install the Azure module in PowerShell to create the resources.
Create the VM with an ARM template via the iPad's command-line interface.
Which statement best describes a Hybrid Cloud architecture?
Cannot be used with Microsoft Azure
Special use case for secure Government workloads
Does not require any on-premise hardware
Utilizes services of both Public and Private Clouds
Which Azure service can host your web apps without you having to manage underlying infrastructure?
Azure App Service
Application Insights
Azure WebJobs
Azure DataBricks
What kind of information does Azure Information Protection protect?
(Choose3)
PDF documents
Office documents
Email messages
Azure Blob Storage
Virtual hard disks
Your company uses a single, critical virtual machine that will be in place for years. You want to save costs on long-running virtual machines. What should you do?
Use an Azure Reserved Virtual Machine Instance
Management groups
Use an Azure Spot Virtual Machine
Azure Scale Sets
What is the purpose of the Cost Management feature in Azure?
Estimate the cost savings you can realize by migrating your existing workloads to Azure
Create accurate estimates of hourly or monthly Azure costs across the entire Azure portfolio
Track your Azure environment's adherence to your company's compliance requirements
Monitors and analyzes the cost of your current Azure resources
Which of the following statements about SaaS cloud services is correct?
The client is responsible for purchasing all client software.
Applications must be accessed from a secure network (aka VPN)
The cloud service provider is responsible for all application upgrades.
The client has complete control over the application.
Define the concept of "scalability."
The ability of a system to handle increased load
The ability of a cloud service to be accessed quickly from any location via the internet
A cloud service that remains available after a failure occurs
A cloud service that responds quickly when demand increases and needs to be manually scaled down when demand decreases
You need to reference how Microsoft secures their cloud infrastructure to meet strict compliance controls. What do you need to reference for this information?
Compliance Manager
Service Trust Portal
Azure Arc
Conditional Access policies
Which of the following are valid Azure storage redundancy types
(Choose3)
Read-access geo-zone-redundant storage (RA-GZRS)
Global zone storage (GZS)
Zone redundant storage (ZRS)
Locally redundant storage (LRS)
Which of the following are serverless computing services provided by Azure?
(Choose3)
Azure Logic Apps
Azure Virtual Machines
Azure Event Grid
Azure Functions
Your organization repeatedly deploys the same collection of resources across multiple departments. Your technology director wants to know if there is a quicker, more reliable method for consistently deploying the same resources. Which method would you recommend as the team's first step in automating the repeated deployment of individual resources?
Azure Resource Manager (ARM) templates
Azure Resource Manager
Azure Blueprints
Conditional Access policy
You need to create a network drive in Azure Storage. The drive needs to be accessible from several computers that run Windows 8.1. What storage solution should you create?
A File service in a storage account
A Blob service in a storage account
A virtual machine data disk
A Queue service in a storage account
You need to choose an Azure-native tool that enables you to manage, control, and monitor access to important resources in your organization. These resources include resources in Azure AD, Azure, and other Microsoft Online services such as Microsoft 365 or Microsoft Intune. What service should you choose?
Azure Sentinel
Azure Firewall
Azure Key Vault
Azure Privileged Identity Management (PIM)
Which of the following attributes describe public cloud offerings?
Pay-as-you-go pricing
Hardware configuration
Insecure connections to resources
Upfront hardware purchases
